Privacy Policy

The only personal information we collect is what you voluntarily provide when you create an account:

• First name and last name — so your teacher can recognize you and so the app can greet you.
• Email address — used to save your practice history across devices and to recover your account if you lose access.

As you practice, the app records your practice activity (which deals you played and how you did) so it can show your progress and, if you join a class, share your progress with your teacher. We do not collect payment information and we serve no downloads.

Two things are recorded automatically rather than typed in by you:

• The kind of device and browser you signed in on — broad categories such as “iPad” and “Safari,” stored alongside your sign-in. This tells us how many people use tablets versus computers, and helps us spot problems that affect only one browser (for example, a change to how Safari stores data that logs people out early). We do not store your IP address and we do not keep the detailed browser string that could be used to fingerprint your device.
• Ordinary server logs — our server keeps short technical records of requests (such as which page was requested and what type of browser asked for it) so we can diagnose problems. These are working notes for fixing bugs, not a profile of you.

Your practice activity is end-to-end encrypted. It is encrypted on your device before it is sent to our server, which means it cannot be read in transit or at rest by anyone — including us — except you and any teacher you have explicitly chosen to share it with.

Sharing your progress with a teacher is always something you opt into by joining their class. You can leave a class at any time from your settings, which stops your teacher from seeing your progress on new work.

If you add friends, they can see whether you are currently online and whether you are at a table or practicing — the same way any online game shows who is around to play. This is never stored: it exists only while you have the site open and disappears when you close it. You can appear offline at any time using the invisible setting, and your friends are simply shown that you are offline.

We set one cookie, and its only job is to keep you signed in so you don't have to enter a recovery code every time you come back. It contains a random string of characters — not your name, your email, or any of your practice data.

• It is a first-party cookie: it is read only by us, never by another company.
• It cannot be read by scripts running in the page, and it is only ever sent over a secure connection.
• It lasts up to 180 days, and refreshes as you keep using the site.
• Signing out deletes it and cancels the session on our server, so it can't be reused.

We use it for nothing else — no advertising, no analytics, no following you to other websites. Because it is strictly necessary for signing in, it is the one kind of cookie that does not require a consent banner.

A note about shared devices. Several family members or classmates can be signed in on the same device, and the app lets you switch between those accounts without re-entering a code. That is a convenience on a family iPad, but it does mean anyone using that device can open those accounts. On a shared or public computer, sign out when you're finished.

We use GoatCounter, a privacy-friendly, open-source analytics tool, to count how many times our pages are viewed. GoatCounter:

• does not use cookies;
• does not collect or store personally identifiable information;
• does not track you across other websites.

It tells us only aggregate, anonymous counts such as how many people visited a page. We use no advertising networks and no third-party tracking of any kind.

We use your information solely to operate the service — saving your progress, letting you sign in across devices, recovering your account, and connecting you with a teacher's class when you ask us to.

We do not sell, rent, or trade your personal information, and we do not share it with anyone without your express consent. The only third parties involved are the infrastructure providers needed to run the service (for example, our hosting provider and the email service used to send account-recovery messages), and they process data only on our behalf.

You can request that we delete your account and associated data at any time by emailing [email protected]. Because the platform is open source, you are also welcome to review exactly how your data is handled in our source code.

Questions about this policy or your data? Email [email protected] and we'll be glad to help.